| Virual Oral Presentation Slide by Slide |
IEEE/ICACT20220047 Slide.15
[Big Slide]
| Oral Presentation |
|
|
The purpose of this method is to detect authentication failures caused by casting errors in the processing of programs inside the WebAPI using type conversions in parameters and string combinations. The parameter replacement process is conducted in the same way as in Method 3 of No.1. The vulnerability is determined by checking the HTTP status code from the response of the generated request, and if the request is processed normally (e.g., 200 OK), it is determined to be vulnerable. | |
| [Go to Next Slide] |